网络工具
配置网络有很多工具,以下具体做下工具的简介:
ifconfig命令
ifconfig命令被用于配置和显示Linux内核中网络接口的网络参数
ifconfig [网络设备][参数]
ifconfig -a
ifconfig IFACE [ up | down ]
参数:
add <地址>:设置网络设备IPV6的IP地址;
del <地址>;删除网络设备的IPV6地址
down: 关闭指定设备
hw : 硬件设备的MAC地址
mtu : 设置网络最大MTU值
netmask: 子网掩码
up: 开启指定设备
实例:1 ifconfig直接显示网络信息
[root@localhost ~]#ifconfig <-- 直接输入是显示当前网络配置信息
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.3.3 netmask 255.255.255.0 broadcast 192.168.3.255
inet6 fe80::4f5c:981f:ccf5:8821 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:12:ae:2f txqueuelen 1000 (Ethernet)
RX packets 558 bytes 60821 (59.3 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 371 bytes 99707 (97.3 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 222.222.222.222 netmask 255.255.255.0 broadcast 222.222.222.255
inet6 fe80::1fcd:de78:df2b:afd1 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:12:ae:39 txqueuelen 1000 (Ethernet)
RX packets 41803 bytes 3074642 (2.9 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 110 bytes 12848 (12.5 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
实例:2 down 和 up 指定网卡
[root@localhost ~]#ifconfig ens37 down
[root@localhost ~]#ip a <--查看所有网卡信息
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP
qlen 1000
link/ether 00:0c:29:12:ae:2f brd ff:ff:ff:ff:ff:ff
inet 192.168.3.3/24 brd 192.168.3.255 scope global ens33
valid_lft forever preferred_lft forever
inet6 fe80::4f5c:981f:ccf5:8821/64 scope link 关闭状态
valid_lft forever preferred_lft forever |
3: ens37: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
link/ether 00:0c:29:12:ae:39 brd ff:ff:ff:ff:ff:ff
[root@localhost ~]#ifconfig ens37 up
[root@localhost ~]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP
qlen 1000
link/ether 00:0c:29:12:ae:2f brd ff:ff:ff:ff:ff:ff
inet 192.168.3.3/24 brd 192.168.3.255 scope global ens33
valid_lft forever preferred_lft forever UP状态
inet6 fe80::4f5c:981f:ccf5:8821/64 scope link |
3: ens37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP
qlen 1000
link/ether 00:0c:29:12:ae:39 brd ff:ff:ff:ff:ff:ff
inet 172.18.253.205/16 brd 172.18.255.255 scope global dynamic ens37
valid_lft 86397sec preferred_lft 86397sec
inet6 fe80::1fcd:de78:df2b:afd1/64 scope link
valid_lft forever preferred_lft forever
实例:3 修改IP地址,此命令修改的IP只存于内存中,重启或退出后就无效了
[root@localhost ~]#ifconfig ens37 222.222.222.222/24
[root@localhost ~]#ifconfig
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.3.3 netmask 255.255.255.0 broadcast 192.168.3.255
inet6 fe80::4f5c:981f:ccf5:8821 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:12:ae:2f txqueuelen 1000 (Ethernet)
RX packets 1058 bytes 116869 (114.1 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 687 bytes 158377 (154.6 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 222.222.222.222 netmask 255.255.255.0 broadcast 222.222.222.255
inet6 fe80::1fcd:de78:df2b:afd1 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:12:ae:39 txqueuelen 1000 (Ethernet)
RX packets 52295 bytes 3798547 (3.6 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 155 bytes 20392 (19.9 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
route命令
route命令用来显示并设置Linux内核中的网络路由表,route命令设置的路由主要是静态路由
route (选项)(参数)
选项:
-A 设置地址类型;
-C 打印将Linux核心的路由缓存;
-v 详细信息模式;
-n 显示详细路由表
-e netstat格式显示路由表
-net 到一个网络的路由表
-host 到一台主机的路由表
参数:
add: 增加路由记录
del: 删除指定路由记录
Target: 目的网络或目的主机
gw: 网关
dev: 路由记录所表示的网络接口
实例1:显示当前路由
[root@localhost ~]#route 不加参数直接显示路由信息,目标地址与加了-n的不同
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default gateway 0.0.0.0 UG 100 0 0 ens33
default gateway 0.0.0.0 UG 101 0 0 ens37
172.18.0.0 0.0.0.0 255.255.0.0 U 100 0 0 ens37
192.168.3.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
[root@localhost ~]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.3.1 0.0.0.0 UG 100 0 0 ens33
0.0.0.0 172.18.0.1 0.0.0.0 UG 101 0 0 ens37
172.18.0.0 0.0.0.0 255.255.0.0 U 100 0 0 ens37
192.168.3.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
## ##192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
实例2: 删除一条路由和添加一条路由
[root@localhost ~]#route del -net 0.0.0.0 <-- 删除路由时如果不添加后续的参数也是可以的
[root@localhost ~]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
172.18.0.0 0.0.0.0 255.255.0.0 U 100 0 0 ens37
192.168.3.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
[root@localhost ~]#route add default gw 172.18.0.1
[root@localhost ~]#route add default gw 192.168.3.1
[root@localhost ~]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.3.1 0.0.0.0 UG 0 0 0 ens33
0.0.0.0 172.18.0.1 0.0.0.0 UG 0 0 0 ens37
172.18.0.0 0.0.0.0 255.255.0.0 U 100 0 0 ens37
192.168.3.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
netstat 命令
显示网络连接及路由表接口状态
netstat [--tcp|-t] [--udp|-u] [--raw|-w] [--listening|-l] [--all|-a] [--numeric|-n] [--extend|-e[--extend|-e]] [--program|-p]
选项:
-t: tcp协议相
-u: udp协议相关
-w: raw socket相关
-l: 处于监听状态
-a: 所有状态
-n: 以数字显示IP和端口;
-e:扩展格式
-p: 显示相关进程及P
-r: 显示内核路由表
常用的选项:
netstat -tnl , netstat -unl , netstat -tan , netstat -uan
实例:
[root@localhost ~]#netstat -tnl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
tcp 0 0 192.168.122.1:53 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
tcp6 0 0 :::111 :::* LISTEN
tcp6 0 0 :::22 :::* LISTEN
tcp6 0 0 ::1:631 :::* LISTEN
tcp6 0 0 ::1:25 :::* LISTEN
ip 命令
查看或调整路由,网络设备,策略路由和隧道
ip [ OPTIONS ] OBJECT { COMMAND | help
选项:
-V:显示指令版本信息;
-s:输出更详细的信息;
-f:强制使用指定的协议族;
-4:指定使用的网络层协议是IPv4协议;
-6:指定使用的网络层协议是IPv6协议;
-0:输出信息每条记录输出一行,即使内容较多也不换行显示;
-r:显示主机时,不使用IP地址,而使用主机的域名。
项目:
link: 链路
addr: 地址
route:路由
实例1:添加ip别名及地址
[root@localhost ~]#ip addr add 172.18.0.11/16 dev ens37 label ens37:1 <--创建ens37:1的别名
[root@localhost ~]#ifconfig
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.3.3 netmask 255.255.255.0 broadcast 192.168.3.255
inet6 fe80::4f5c:981f:ccf5:8821 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:12:ae:2f txqueuelen 1000 (Ethernet)
RX packets 2106 bytes 226018 (220.7 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1321 bytes 381623 (372.6 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.18.253.205 netmask 255.255.0.0 broadcast 172.18.255.255
inet6 fe80::1fcd:de78:df2b:afd1 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:12:ae:39 txqueuelen 1000 (Ethernet)
RX packets 395630 bytes 25797238 (24.6 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 206 bytes 18381 (17.9 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
ens37:1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.18.0.11 netmask 255.255.0.0 broadcast 0.0.0.0
ether 00:0c:29:12:ae:39 txqueuelen 1000 (Ethernet)
实例2:清除网卡别名
[root@localhost ~]#ip addr flush dev ens37 label ens37:1 <--冲刷ens37:1的别名
[root@localhost ~]#ifconfig <--再次查看已没有了别名
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.3.3 netmask 255.255.255.0 broadcast 192.168.3.255
inet6 fe80::4f5c:981f:ccf5:8821 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:12:ae:2f txqueuelen 1000 (Ethernet)
RX packets 2347 bytes 251188 (245.3 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1459 bytes 421301 (411.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.18.253.205 netmask 255.255.0.0 broadcast 172.18.255.255
inet6 fe80::1fcd:de78:df2b:afd1 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:12:ae:39 txqueuelen 1000 (Ethernet)
RX packets 398184 bytes 25973444 (24.7 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 212 bytes 18906 (18.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1 (Local Loopback)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
virbr0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
inet 192.168.122.1 netmask 255.255.255.0 broadcast 192.168.122.255
ether 52:54:00:3a:bb:da txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
实例3:添加路由
[root@localhost ~]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.3.1 0.0.0.0 UG 0 0 0 ens33
0.0.0.0 172.18.0.1 0.0.0.0 UG 0 0 0 ens37
172.18.0.0 0.0.0.0 255.255.0.0 U 100 0 0 ens37
192.168.3.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
[root@localhost ~]#ip route add 192.168.59.0/24 via 192.168.3.1
[root@localhost ~]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.3.1 0.0.0.0 UG 0 0 0 ens33
0.0.0.0 172.18.0.1 0.0.0.0 UG 0 0 0 ens37
172.18.0.0 0.0.0.0 255.255.0.0 U 100 0 0 ens37
192.168.3.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
192.168.59.0 192.168.3.1 255.255.255.0 UG 0 0 0 ens33
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
[root@localhost ~]#ip route add 192.168.58.0/24 via 192.168.3.1 dev ens33
[root@localhost ~]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.3.1 0.0.0.0 UG 0 0 0 ens33
0.0.0.0 172.18.0.1 0.0.0.0 UG 0 0 0 ens37
172.18.0.0 0.0.0.0 255.255.0.0 U 100 0 0 ens37
192.168.3.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
192.168.58.0 192.168.3.1 255.255.255.0 UG 0 0 0 ens33
192.168.59.0 192.168.3.1 255.255.255.0 UG 0 0 0 ens33
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
实例4:删除路由
[root@localhost ~]#ip route del 192.168.58.0/24
[root@localhost ~]#ip route del 192.168.59.0/24
[root@localhost ~]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.3.1 0.0.0.0 UG 0 0 0 ens33
0.0.0.0 172.18.0.1 0.0.0.0 UG 0 0 0 ens37
172.18.0.0 0.0.0.0 255.255.0.0 U 100 0 0 ens37
192.168.3.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
实例5:清空接口路由
[root@localhost ~]#ip route flush dev ens37
[root@localhost ~]#route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.3.1 0.0.0.0 UG 0 0 0 ens33
192.168.3.0 0.0.0.0 255.255.255.0 U 100 0 0 ens33
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
ss命令
显示活动状态的套接字信息
格式: ss [option] ...[filter]
选项:
-t: tcp协议相
-u: udp协议相关
-w: 裸套接字相关
-x:unix sock相关
-l: listen状态的连接
-a: 所有
-n: 数字格式
-p: 相关的程序及PID
-e: 扩展的信息
-m:内存用量
-o:计时器
过滤:
FILTER : [ state TCP-STATE ] [ EXPRESSION ]
TCP的常见状态:
tcp finite state machine:
LISTEN: 监听
ESTABLISHED:已建立的连接
FIN_WAIT_1
FIN_WAIT_2
SYN_SENT
SYN_RECV
CLOSED
表达示:
EXPRESSION:
dport =
sport =
示例:'( dport = :ssh or sport = :ssh )'
常用组合:
ss -tan , ss -tanl , ss -tanlp , ss -uan
实例1 :
[root@localhost ~]#ss -tnl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 *:111 *:*
LISTEN 0 5 192.168.122.1:53 *:*
LISTEN 0 128 *:22 *:*
LISTEN 0 128 127.0.0.1:631 *:*
LISTEN 0 100 127.0.0.1:25 *:*
LISTEN 0 128 :::111 :::*
LISTEN 0 128 :::22 :::*
LISTEN 0 128 ::1:631 :::*
LISTEN 0 100 ::1:25 :::*
实例2:显示所有已建立的ssh连接
[root@localhost ~]#ss -o state established '( dport = :ssh or sport = :ssh )'
Netid Recv-Q Send-Q Local Address:Port Peer Address:Port
tcp 0 0 192.168.3.3:ssh 192.168.3.1:58074 timer:(keepalive,16min,0)
nmcli 命令
命令行工具,用于控制网络管理
nmcli [ OPTIONS ] OBJECT { COMMAND | help }
选项:
-t[erse] 简要输出
-p[retty] 完美输出
-m[ode] tabular|multiline 输出模式
-c[olors] auto|yes|no 使用颜色输出
-f[ields] <field1,field2,...>|all|common 指定范围输出
-e[scape] yes|no escape columns separators in values
-a[sk] 要求这缺少的参数
-s[how-secrets] 参许显示出密码
-w[ait] <seconds> 配置超时时间等待操作完成
-v[ersion] 查看程序的版本
-h[elp] 显示帮助信息
项目:
g[enera]:
nmcli general {status | hostname | permissions | logging}
n[etworking]:
nmcli networking {on | off | connectivity}
r[adio]:
nmcli radio {all | wifi | wwan}
c[onnection]:
nmcli connection {show | up | down | modify | add | edit | clone | delete | monitor | reload | load | import | export }
d[evice]:
nmcli device {status | show | set | connect | reapply | modify | disconnect | delete | monitor | wifi | lldp}
a[gent]:
nmcli agent {secret | polkit | all}
m[onitor]:
nmcli monitor
常用的OBJECT 是 connection
[root@localhost ~]#nmcli c -help
Usage: nmcli connection { COMMAND | help }
COMMAND := { show | up | down | add | modify | clone | edit | delete | monitor | reload | load | import | export }
show [--active] [--order <order spec>]
show [--active] [id | uuid | path | apath] <ID> ...
up [[id | uuid | path] <ID>] [ifname <ifname>] [ap <BSSID>] [passwd-file <file with passwords>]
down [id | uuid | path | apath] <ID> ...
add COMMON_OPTIONS TYPE_SPECIFIC_OPTIONS SLAVE_OPTIONS IP_OPTIONS [-- ([+|-]<setting>.<property> <value>)+]
modify [--temporary] [id | uuid | path] <ID> ([+|-]<setting>.<property> <value>)+
clone [--temporary] [id | uuid | path ] <ID> <new name>
edit [id | uuid | path] <ID>
edit [type <new_con_type>] [con-name <new_con_name>]
delete [id | uuid | path] <ID>
monitor [id | uuid | path] <ID> ...
reload
load <filename> [ <filename>... ]
import [--temporary] type <type> file <file to import>
export [id | uuid | path] <ID> [<output file>]
查看连接简要信息 nmcli c show
[root@localhost ~]#nmcli c show
NAME UUID TYPE DEVICE
Wired connection 1 61765cc9-01d2-3a86-8fd8-3a2f28bc14ec 802-3-ethernet ens37
ens33 11d11312-cf20-412f-a5c8-d662b67f4f6e 802-3-ethernet ens33
virbr0 23d111b9-ce71-44ef-a3a7-6c0e6aaaeed4 bridge
查看某个连接的信息 nmcli c show conn-name
[root@localhost ~]#nmcli c show ens33
connection.id: ens33
connection.uuid: 11d11312-cf20-412f-a5c8-d662b67f4f6e
connection.stable-id: --
connection.interface-name: ens33
connection.type: 802-3-ethernet
connection.autoconnect: yes
connection.autoconnect-priority: 0
connection.timestamp: 1503627532
connection.read-only: no
connection.permissions:
connection.zone: --
connection.master: --
connection.slave-type: --
connection.autoconnect-slaves: -1 (default)
connection.secondaries:
connection.gateway-ping-timeout: 0
connection.metered: unknown
connection.lldp: -1 (default)
802-3-ethernet.port: --
802-3-ethernet.speed: 0
802-3-ethernet.duplex: --
802-3-ethernet.auto-negotiate: yes
802-3-ethernet.mac-address: --
802-3-ethernet.cloned-mac-address: --
802-3-ethernet.generate-mac-address-mask:--
802-3-ethernet.mac-address-blacklist:
802-3-ethernet.mtu: auto
802-3-ethernet.s390-subchannels:
802-3-ethernet.s390-nettype: --
802-3-ethernet.s390-options:
802-3-ethernet.wake-on-lan: 1 (default)
802-3-ethernet.wake-on-lan-password: --
ipv4.method: manual
ipv4.dns:
ipv4.dns-search:
ipv4.dns-options: (default)
ipv4.dns-priority: 0
ipv4.addresses: 192.168.3.3/24
ipv4.gateway: 192.168.3.1
ipv4.routes:
ipv4.route-metric: -1
ipv4.ignore-auto-routes: no
ipv4.ignore-auto-dns: no
ipv4.dhcp-client-id: --
ipv4.dhcp-timeout: 0
ipv4.dhcp-send-hostname: yes
ipv4.dhcp-hostname: --
ipv4.dhcp-fqdn: --
ipv4.never-default: no
ipv4.may-fail: yes
ipv4.dad-timeout: -1 (default)
ipv6.method: auto
ipv6.dns:
ipv6.dns-search:
ipv6.dns-options: (default)
ipv6.dns-priority: 0
ipv6.addresses:
ipv6.gateway: --
ipv6.routes:
ipv6.route-metric: -1
ipv6.ignore-auto-routes: no
ipv6.ignore-auto-dns: no
ipv6.never-default: no
ipv6.may-fail: yes
ipv6.ip6-privacy: 0 (disabled)
ipv6.addr-gen-mode: stable-privacy
ipv6.dhcp-send-hostname: yes
ipv6.dhcp-hostname: --
ipv6.token: --
GENERAL.NAME: ens33
GENERAL.UUID: 11d11312-cf20-412f-a5c8-d662b67f4f6e
GENERAL.DEVICES: ens33
GENERAL.STATE: activated
GENERAL.DEFAULT: yes
GENERAL.DEFAULT6: no
GENERAL.VPN: no
GENERAL.ZONE: --
GENERAL.DBUS-PATH: /org/freedesktop/NetworkManager/ActiveConnection/0
GENERAL.CON-PATH: /org/freedesktop/NetworkManager/Settings/0
GENERAL.SPEC-OBJECT: /
GENERAL.MASTER-PATH: --
IP4.ADDRESS[1]: 192.168.3.3/24
IP4.GATEWAY: 192.168.3.1
IP6.ADDRESS[1]: fe80::4f5c:981f:ccf5:8821/64
IP6.GATEWAY:
添加IP nmcli con add type__ con-name__ ifname interface-name ip4
命令 项目 子命令 网络类型(ethernet) 命名的连接名(ens33 ,eth1) 设备名:(ens33 eth1) ip4 (ip地址)
[root@localhost network-scripts]#nmcli connection add type ethernet con-name static-ens37 ifname ens37 ip4 172.18.6.10/16
[root@localhost network-scripts]#nmcli connection up ens37
[root@localhost network-scripts]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:12:ae:2f brd ff:ff:ff:ff:ff:ff
inet 192.168.3.3/24 brd 192.168.3.255 scope global ens33
valid_lft forever preferred_lft forever
inet6 fe80::4f5c:981f:ccf5:8821/64 scope link
valid_lft forever preferred_lft forever
3: ens37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:12:ae:39 brd ff:ff:ff:ff:ff:ff
inet 172.18.6.10/16 brd 172.18.255.255 scope global ens37
valid_lft forever preferred_lft forever
inet6 fe80::8eee:82d4:e231:fa2f/64 scope link
valid_lft forever preferred_lft forever
修改IP nmcli connection modify IFACE setting.property value gw4
命令 连接 修改 接口 ipv4.address ip地址 gw4 网关地址
[root@localhost network-scripts]#nmcli c mo ens37 ipv4.addresses 172.18.6.11/16 gw4 172.18.6.1/16
[root@localhost network-scripts]#nmcli c down ens37 && nmcli c up ens37
Connection 'ens37' successfully deactivated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/15)
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/17)
[root@localhost network-scripts]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:12:ae:2f brd ff:ff:ff:ff:ff:ff
inet 192.168.3.3/24 brd 192.168.3.255 scope global ens33
valid_lft forever preferred_lft forever
inet6 fe80::4f5c:981f:ccf5:8821/64 scope link
valid_lft forever preferred_lft forever
3: ens37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:12:ae:39 brd ff:ff:ff:ff:ff:ff
inet 172.18.6.11/16 brd 172.18.255.255 scope global ens37
valid_lft forever preferred_lft forever
inet6 fe80::2899:7cd6:3856:cde5/64 scope link
valid_lft forever preferred_lft forever
4: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN qlen 1000
link/ether 52:54:00:3a:bb:da brd ff:ff:ff:ff:ff:ff
inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
valid_lft forever preferred_lft forever
5: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN qlen 1000
link/ether 52:54:00:3a:bb:da brd ff:ff:ff:ff:ff:ff
接口bond网卡
4步:
1.添加bonding接口
2.添加bonding接口的奴隶接口
3.启用奴隶接口
4.启用bonding接口
添加bonding接口 : 命令 连接 添加 类型 连接名 设备名 模式
[root@localhost ~]#nmcli connection add type bond con-name bond0 ifname bond0 mode active-backup
Connection 'bond0' (3af850f0-d197-444c-9148-2010f04a38e2) successfully added.
添加奴隶接口: 命令 连接 添加 类型 设备名 母设备
[root@localhost ~]#nmcli connection add type bond-slave ifname ens38 master bond0
Connection 'bond-slave-ens38' (17b1d1b1-bb56-4cce-9d96-f7b32be9fd60) successfully added.
[root@localhost ~]#nmcli connection add type bond-slave ifname ens39 master bond0
Connection 'bond-slave-ens39' (0289bb46-8775-46dd-bee7-1d96982afabf) successfully added.
启用奴隶接口:
[root@localhost ~]#nmcli connection up bond-slave-ens38 && nmcli connection up bond-slave-ens39
Connection successfullyactivated(DBusactivepath:/org/freedesktop/NetworkManager/ActiveConnection/7)
Connection successfullyactivated(DBusactivepath:/org/freedesktop/NetworkManager/ActiveConnection/8)
启用bonding接口
[root@localhost ~]#nmcli connection up bond0
Connectionsuccessfullyactivated(masterwaitingforslaves(DBusactivepath:/org/freedesktop/NetworkManager/ActiveConnection/9)
查看网卡信息
[root@localhost ~]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:12:ae:2f brd ff:ff:ff:ff:ff:ff
inet 192.168.3.3/24 brd 192.168.3.255 scope global ens33
valid_lft forever preferred_lft forever
inet6 fe80::4f5c:981f:ccf5:8821/64 scope link
valid_lft forever preferred_lft forever
3: ens37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:12:ae:39 brd ff:ff:ff:ff:ff:ff
inet 172.18.6.11/16 brd 172.18.255.255 scope global ens37
valid_lft forever preferred_lft forever
inet6 fe80::2899:7cd6:3856:cde5/64 scope link
valid_lft forever preferred_lft forever
4: ens38: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master bond0 state UP qlen 1000
link/ether 00:0c:29:12:ae:43 brd ff:ff:ff:ff:ff:ff
5: ens39: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master bond0 state UP qlen 1000
link/ether 00:0c:29:12:ae:43 brd ff:ff:ff:ff:ff:ff
6: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN qlen 1000
link/ether 52:54:00:3a:bb:da brd ff:ff:ff:ff:ff:ff
inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
valid_lft forever preferred_lft forever
7: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN qlen 1000
link/ether 52:54:00:3a:bb:da brd ff:ff:ff:ff:ff:ff
8: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 00:0c:29:12:ae:43 brd ff:ff:ff:ff:ff:ff
inet 192.168.3.136/24 brd 192.168.3.255 scope global dynamic bond0
valid_lft 1798sec preferred_lft 1798sec
inet6 fe80::52:a23c:e27d:fa92/64 scope link